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DETAILED ACTION 



Claim Rejections - 35 (JSC § 102 

1 . The following is a quotation of the appropriate paragraphs of 35 U.S.C. 1 02 
that form the basis for the rejections under this section made in this Office 
action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in a patent granted on an application for patent by another filed in the 
United States before the invention thereof by the applicant for patent, or on an international application 
by another who has fulfilled the requirements of paragraphs (1 ), (2), and (4) of section 371 (c) of this 
title before the invention thereof by the applicant for patent. 

2. The changes made to 35 U.S.C. 102(e) by the American Inventors Protection 
Act of 1999 (AIPA) and the Intellectual Property and High Technology 
Technical Amendments Act of 2002 do not apply when the reference is a U.S. 
patent resulting directly or indirectly from an international application filed 
before November 29, 2000. Therefore, the prior art date of the reference is 
determined under 35 U.S.C. 102(e) prior to the amendment by the AIPA (pre- 
AIPA 35 U.S.C. 102(e)). 

3. Claims 1-4, 8, 10-15, 17,19, 21-26, 28, 30, and 32-33 are rejected under 35 
U.S.C. 102(e) as being anticipated by Hardy et al (US/6073242). 

4. As per claims 1,12, and 23, Hardy et al disclose the "Electronic Authority 
Server" invention, which teaches the apparatus, and a method for facilitating 
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the delegation of operations involved in providing digital signatures to a 
signature server (Col 7 lines 10-38), the method comprising: 
initializing a secure connection between the client and the server by using an 
encrypting link. The user sends the authority server a message including the 
authorization and the outgoing message to be signed (Col 8 lines 20-52). The 
authority server will then look up the user signing keys associates to his/her 
enterprise role, authority (Col 9 lines 18-27). Once the authentication process 
is completed, the server signs the message (Col 8 line 53 to Col 9 line 49, and 
Col 9 line 65 - Col 10 line 20). 

5. As per claims 2, 13, and 24, Hardy et al disclose the method of claim 1 , 
wherein prior to signing the item, the method further comprises authenticating 
the user (Col 9 lines 4-31). 

6. As per claims 3, 14, and 25, Hardy et al disclose the method of claim 2, 
wherein prior to signing the item, the method further comprises determining 
whether the user is authorized to sign the item (Col 8 lines 29-31 ). 

7. As per claims 4, 15, and 26, Hardy et al disclose the method of claim 3, 
wherein determining whether the user is authorized to sign the item involves 
looking up an authorization for the user based upon an identifier for the user 





A 
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8. 



9. 



as well as an identifier for an application to which the user will send the signed 
item (Col 8 line 53 to Col 1 1 line 65). 

As per claims 6, 17, and 28, Hardy et al disclose the method of claim 1, 
wherein comprising allowing the user to authenticate the signature server prior 
to sending the message to the signature server (Col 8 lines 20-35). 

As per claims 8, 19, and 30, Hardy et al disclose the method of claim 1, 
wherein the method further comprises configuring the signature server to 
accommodate a new user by: receiving a request from an authorized entity to 
add the new user; generating a key pair for the new user, including a new user 
private key and a new user public key (Col 20 lines 20-45); communicating 
with a certification authority to obtain a certificate for the new user based on 
the key pair (Col 20 line 65 to Col 21 line 18); and storing the certificate and 
the key pair for the new user in the location that is accessible by the signature 
server to enable the signature server to sign items on behalf of the new user 
(Col 9 lines 5-35). 



As per claims 10,21, and 32, Hardy et al disclose the method of claim 1 , 
wherein the method further comprises archiving the message and the signed 
item at the signature server (Col 20 lines 15-16). 



# 
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11. As per claims 1 1 , 22, and 33, Hardy et al disclose the method of claim 1 , 

wherein the method further comprises forwarding the signed item to an archive 
server in order to be archived (Col 20 line 15). 



12. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 



13. Claims 5, 7, 9, 16, 18, 20, 27, 29, and 31 are rejected under 35 U.S.C. 103(a) 
as being unpatentable over Hardy et al. 

14. As per claims 7, 18, and 29, Hardy et al disclose the method of claim 1 , further 
comprising the returning of the signed item to the user so that the user can 
send the signed item to a recipient (Col 17 line 40- Col 18 line 57). However, 
Hardy et al do not specifically teach the user receiving the signed item and 
then send it later. Nevertheless, Hardy et al disclose the template to send the 
message (Col 17 lines 40-45), which includes the "from" and "to" field. 
Therefore, it is obvious at the time of the invention was made for one of 
ordinary skill in the art to send the message to himself, the recipient, so that 
the user can receive the signed message for later sending to any destination. 



Claim Rejections - 35 USC § 103 
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15. As per claims 5, 16, and 27, Hardy et al disclose the method of claim 3, 
wherein determining whether the user is authorized to sign the item involves 
communicating with an authority server. However, Hardy et al do not teach 
the authority server is separated from the signature server. Nevertheless, 
Hardy et al teach the server (Figure 2, 102) providing many tasks including 
authentication, maintaining user directory and database, authorizing, 
encrypting and signing (Col 8 line 53 to Col 9 line 31 ). It is obvious at the time 
of the invention was made for one of ordinary skill in the art that the authority 
and the signing server can be two separate servers. 

16, As per claims 9, 20, and 31 , Hardy et al disclose the method of claim 1 . 
However, Hardy et al do not teach the method further comprises configuring 
the signature server to delete an old user by; receiving a request from an 
authorized entity to delete the old user; notifying a certification authority to 
revoke a certificate for the old user; and removing the private key for the old 
user from the signature server so that the signature server can no longer sign 
items on behalf of the old user. Nevertheless, in Col 10 line 64 to Col 1 1 line 
8, Hardy et al teach the administration method of the users. Therefore, it is 
obvious at the time of the invention was made for one of ordinary skill in the art 
to know that the same management method can do the same tasks, such as 
delete the old user, revoking the certificate, and removing the private key of 
the old user. 
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Conclusion 



17. Any inquiry concerning this communication from the examiner should be 
directed to Linh Son whose telephone number is (703)-305-8914 or Fax to 
703-746-9821. 

1 8. If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor Kim Y. Vu can be reached at (703)-305-4393. The fax 
numbers for this group are (703)-872-9306 (official fax). Any inquiry of general 
nature or relating to the status of this application or proceeding should be 
directed to the group receptionist whose telephone number is (703)-305-9600. 

Linh LD Son 



Patent Examiner 
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